General

  • Target

    5f4001a16d3e3fb5bdadc8d708c5207670093b5559df3aec7567e5e7752969c0N

  • Size

    104KB

  • MD5

    4e75ef6868ff37682fdf349ec4c854c0

  • SHA1

    378b4b08231220c7ad97e0ac9fdaf4ebecc280c5

  • SHA256

    5f4001a16d3e3fb5bdadc8d708c5207670093b5559df3aec7567e5e7752969c0

  • SHA512

    0361af6059908f1dfce6824947250d999fcfe00aaf8d6a97d186156480b435fbc2b6ebdf681712d18198e2dca5a4e3e790a8d590c72c3dd979df2cdf9ed65b7d

  • SSDEEP

    3072:hYCM8Y2yxBjWvFe51x7cEGrhkngpDvchkqbAIQS:htMeW5Oo51x4brq2Ahn

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://viruslist.com/wcmd.txt

http://viruslist.com/ppslog.php

http://viruslist.com/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 5f4001a16d3e3fb5bdadc8d708c5207670093b5559df3aec7567e5e7752969c0N
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections